See your network.
Simulate before you change it.
Osprey is a real-time visibility and engineering platform for OSPF, IS-IS, and BGP networks. Live topology, what-if simulation, time travel, and diagnostics — all passive, all from one web UI.
- ▶ Multi-protocol discovery
OSPFv2, OSPFv3, and IS-IS via GRE or SNMP. BGP via BMP. Layer 2 via LLDP/CDP.
- ▶ What-if simulation
Fail links, change costs, add hypothetical routers — server-side Dijkstra, no production impact.
- ▶ Time travel
Scrub back through topology history — see exactly what your network looked like at any point.
- ▶ SPF & BGP path analysis
Forward/reverse Dijkstra with asymmetric detection, route explanations, SR-MPLS label stack, BGP best-path.
- ▶ Incident correlation & alerts
Related events collapse into incidents. Notify via Slack, Teams, email, webhook, or in-app.
Never injects routes or modifies your network
LSA, LSP, and BMP updates stream in live
OSPF, IS-IS, BGP, and L2 on one canvas
Pre-validate changes before you touch prod
Single binary, PostgreSQL — no JVM, no ES
Vendor-agnostic. Your data stays with you.
Everything you need to operate a modern IP network
From discovery to simulation to post-incident analysis — one tool, one interface.
Live Topology Canvas
Interactive graph with real-time push updates. Four layout algorithms (force-directed, geometric, octilinear, circle), saveable per-area layouts, snap-to-grid, minimap, and area boundary overlays. Changes flash on the canvas the moment they happen.
IGP Discovery — OSPF & IS-IS
OSPFv2, OSPFv3 (IPv4 + IPv6 address families), and IS-IS (L1/L2) with full LSDB/LSP visibility. Two discovery modes per protocol: GRE tunnels for real-time adjacencies, or SNMP polling — no tunnel configuration required. Multi-protocol devices are auto-correlated across OSPF and IS-IS.
BGP Visibility via BMP
Passive BMP server (RFC 7854) receives peer state and RIB updates from your routers — no polling. Search BGP routes with exact, longest-match, or covered prefix modes. ECMP analysis, AS-path inspection, and engine-computed best-path selection.
Engineering Mode (What-If)
Simulate link or node failures, change metrics, add hypothetical routers and links, and model SRLG failure groups. Server-side multi-area Dijkstra (OSPF) and multi-level Dijkstra (IS-IS). Batch-assess every link or node to find your weakest points. Save scenarios. Combine with time travel to test past outages.
L2 Discovery — LLDP & CDP
Auto-discovery of Layer 2 adjacencies via SNMP walks of LLDP-MIB and CDP-MIB. Switch crawling with BFS, platform-based filtering (excludes APs and phones), and a toggleable L2 overlay on the canvas. Per-network credential overrides.
SNMP Traffic Monitoring
Interface counters drive utilization heatmaps, per-interface sparklines, and congestion alerts. Automatic 5-second boost polling while detail panels are open. MRTG-style historical charts over 24h, 7d, or 30d. Credential profiles for reuse across targets.
Time Travel
Scrub back through topology history with a timeline slider and transport controls (0.5×–10×). Node panels, link panels, and SPF trees all adapt to the historical state. Hash-deduplicated snapshots keep storage efficient.
Path & SPF Analysis
Dijkstra path between any two devices with forward and reverse costs, asymmetric routing detection, per-hop route explanations (O, O IA, E1/E2, I L1, I L2), and SR-MPLS label stack for IS-IS. Failed-path diagnostics explain why a path can't be computed. View SPF trees rooted at any device.
Alerting & Incidents
Rule engine with templates for congestion, interface errors, and SNMP failures. Event correlation groups related failures into incidents with inferred root causes. Deliver via Slack, Teams, email, webhook, or in-app. Maintenance windows suppress alerts during planned work.
SSH Terminal
Click any device to open a browser-based SSH session directly from the canvas. Host key verification, AES-256 encrypted session recording, and full audit logging. Telnet fallback available but disabled by default.
Diagnostics
Topology health, IP conflicts, single points of failure (articulation points and bridge links), routing stability, congestion trend, OSPF + IS-IS timer consistency, MTU mismatch, OSPF best practices, and dependency impact analysis (Peer AS, critical pairs, SRLG). All with CSV export.
Visio, SVG & PNG Export
Native Visio (.vsdx) export with A4 landscape layout, title block, and legend. Import custom icon packs from Visio stencils (.vssx) — Cisco, Juniper, Arista, Fortinet. Per-device icon overrides carry into exports. Selection-only export for extracting a site from a larger topology.
Operational visibility at a glance
The dashboard gives you a six-card overview of your entire network. The canvas lets you drill into every detail.
Dashboard
- ● Network Health — system status (healthy / degraded / unhealthy), device and link counts, collector and SNMP target status, with a 7-service health popover showing heartbeat freshness.
- ● Active Alerts — severity badges and top 5 firing alerts. Bell icon in the header shows live count with one-click acknowledge.
- ● Recent Events — 24-hour sparkline histogram and the 8 most recent topology events with color-coded type badges.
- ● Active Incidents — correlated incidents with severity, event counts, and inferred root causes.
- ● Network at a Glance — clickable list of all networks with per-network stats (areas, devices, links).
- ● Top Utilized Links — 5 busiest links across all networks with color-coded utilization bars.
Auto-refreshes every 30 seconds.
Canvas Interaction
- ● Panel Manager — up to 4 floating, draggable, resizable panels on screen at once. Minimize to the pill bar without losing state. Keyboard shortcuts for every common action.
- ● Node & Link Detail — device info, neighbors, live traffic with 5-second boost polling, utilization history (24h / 7d / 30d), timer comparison, alerts, and recent events. Multi-protocol tabs when OSPF + IS-IS share a wire.
- ● Color Modes — view by OSPF area or IS-IS level, metric cost gradient, or SNMP utilization heatmap.
- ● Seven Themes — Dark, Retro, High Contrast (WCAG AAA), Alphabet, Midnight, Horizon, Morning. Canvas and SSH terminal both adapt.
- ● Find Device — Ctrl+K search across router IDs, hostnames, DNS, IPs, interface descriptions, and CIDR subnets.
Comprehensive reports
Inventory, routing analysis, and diagnostics — all searchable (text or regex), sortable, and exportable to CSV.
Inventory
- Routers — vendor, model, version, roles, areas / levels
- Links — endpoints, IPs, costs, state
- Interfaces — OSPF and IS-IS timers included
- Software Versions — fleet analysis by vendor, platform, or version
- CDP / LLDP Neighbours — unified L2 view
Routing
- Prefixes — OSPF stubs and IS-IS IP reachability
- Inter-area routes — Type 3 LSA summaries via ABRs
- External routes — Type 5 / 7 with E1/E2 badges
- LSDB Browser — OSPF LSA tabs or IS-IS LSP view
- Neighbor Table — OSPF and IS-IS adjacencies
- BGP Peers & Routes — exact / longest-match / covered
Diagnostics
- Topology Health — down links, asymmetric costs, isolated devices
- IP Conflicts — duplicate RIDs, IPs, prefixes, external conflicts
- SPOF — articulation points and bridge links
- Routing Stability — flapping links and unstable devices
- Congestion Trend — sustained high utilization with sparklines
- Timer Consistency, MTU Mismatch, Best Practices
- Dependency Impact — Peer AS, Critical Pairs, SRLG
Change Summary
Visual distribution of topology changes over 1h, 6h, 24h, 7d, or 30d. Device, link, and stub network additions, removals, and modifications with color-coded badges.
Topology Diff
Compare topology at two points in time. See what was added, removed, or changed across devices, links, and stub networks. Click any entry to highlight it on the canvas.
How it works
Install
One command: sudo apt install osprey.
The installer configures all required services, generates secrets, runs database setup,
and starts everything automatically. You're at the login screen in under a minute.
Connect
Create a network, add a protocol instance (OSPF, IS-IS, or BGP), and configure a GRE tunnel, SNMP target, or BMP session through the web UI. SNMP auto-crawl maps your entire IGP from a single seed device.
Operate
Watch your network live on the canvas. Pre-validate changes in Engineering Mode. Get alerts on adjacency changes and congestion. Run diagnostics. Travel back in time for post-incident analysis. SSH into devices without leaving the browser.
Enterprise-ready administration
Role-based access, encrypted credentials, audit logging, and portable backups.
Role-Based Access
Three roles: admin (full control), engineer (monitoring config), operator (read-only). Password policy enforcement, account lockout protection.
Encrypted at Rest
SNMP credentials, notification secrets, and SSH recordings encrypted with AES-256-GCM. API responses always mask credentials. Secure session cookies.
Audit Log
Immutable record of every admin action with full detail. Filter by user, action, entity, time range. CSV export for compliance.
Backup & Restore
Configuration export (portable JSON) for migration, or full database backup for disaster recovery. Encryption key portability for cross-machine restores.
API Keys
Create API keys with scoped roles and optional expiration for scripts, monitoring integrations, and CI/CD pipelines.
Session Management
View active login sessions with IP, user agent, and activity status. Force-logout individual sessions or all sessions for a user.
Credential Profiles
Reusable SNMP v2c/v3 credential templates. Assign to multiple targets and collectors — no credential duplication.
Prometheus Metrics
Built-in metrics endpoints for every service. Integrate with your existing monitoring stack.
Single binary. Minimal dependencies.
Five services from a single binary. PostgreSQL for storage — no Java, no Elasticsearch, no graph database. Ships as a Debian package; runs in privileged and unprivileged LXC containers.
Router ──GRE──▶ Collector Manager ───┐
Router ──SNMP──▶ SNMP Poller ────────┤
Router ──BMP───▶ BMP Server ─────────┼──▶ Engine ──▶ PostgreSQL
│ │
(NATS message bus)
│
REST API + WebSocket
│
Web Interface (nginx / HTTPS)
Topology, events, SPF, snapshots
REST, WebSocket, SSH proxy
GRE tunnels, IGP adjacencies
Discovery, traffic, L2 crawl
BGP peers and RIBs
Up and running in minutes
The Debian package handles everything: database, TLS certificates, reverse proxy, and service startup.
$ sudo apt install osprey Osprey installed successfully. Web UI: https://localhost/ Login: admin / admin Config: /etc/osprey/osprey.yaml Secrets: /etc/osprey/osprey.env Status: systemctl status osprey.target
Works on Debian 12 (Bookworm), Debian 13 (Trixie), and Ubuntu 24.04+.
Licensing
Start with a free evaluation — all features, no time limit. When you're ready to license production deployments, get in touch.
Free evaluation
Up to 32 devices, forever
- All features included
- No time limit
- No credit card
- Email support
Production licensing
Professional & Enterprise
- Scale beyond 32 devices
- Multi-tenant / multi-site
- Custom terms & integrations
- Priority support
Ready to see your network?
Install Osprey, connect a GRE tunnel, SNMP target, or BMP session, and have your full topology visualized in minutes.